Business units are a fundamental component of the Microsoft Dataverse and Dynamics 365 security model. They allow an organization to model its business structure, such as by region, department, or division. By placing users and records into different business units, administrators can segregate data access. Security roles are then assigned to users within their business unit, granting permissions that control access to records owned by users in the same unit, child units, or across the entire organization, thereby creating independent access permissions.

B. Mailbox tracking is a feature for synchronizing emails, appointments, and tasks between Exchange/Outlook and Dynamics 365. It is not a security structure feature.

C. Document templates are used to create standardized documents like quotes or letters from Dynamics 365 data. They do not control user access.

D. Relationship assistant is an AI-based feature that provides timely action cards to users. It is unrelated to security or organizational structure.

- Microsoft Learn. (2023). Security concepts in Microsoft Dataverse. In Power Platform documentation. Section: "Business units".

- Microsoft Learn. (2023). Create or edit business units. In Power Platform documentation. Section: "Create a business unit".